Top Cloud Security Engineer Jobs

Deploys and manages cloud, virtualized, physical network, and cybersecurity infrastructure, including IDS/IPS, firewalls, SIEM, SOAR, and EDR. Automates provisioning, patching, and reporting with PowerShell, Ansible, Terraform, and REST APIs. Monitors and tunes HCI clusters, conducts disaster-recovery drills, applies STIGs, investigates incidents, maintains runbooks, and mentors junior staff. Requires Windows and Linux administration, networking, infrastructure-as-code, backup and recovery, capacity planning, and troubleshooting expertise in a cleared DoD environment.

Design, implement, and automate scalable cloud security solutions and baselines across AWS/Azure/GCP. Build guardrails, IAM, detection/monitoring, configuration management, and data protection using IaC (Terraform) and everything-as-code. Collaborate with Product Engineering and security teams, produce technical documentation, and operationalize security tooling.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Develop Go-based microservices and REST APIs for CrowdStrike's Cloud Security Posture Management platform. Own end-to-end delivery, follow engineering best practices, use event-driven workflows (Kafka), and store data in Cassandra/Elasticsearch/Postgres. Operate production services (on-call), deploy containers in Kubernetes with Helm, and work with cloud providers and infrastructure-as-code tools to secure cloud workloads.

The Senior Staff Security Engineer will lead edge and network security strategies, overseeing design, operation, and incident response for Gusto's security posture, requiring substantial expertise in Cloudflare and AWS.

Lead design and deliver multi-cloud security and continuous compliance solutions across Azure/AWS/GCP. Build automated preventive/detective/corrective controls, implement audit-ready observability, author production code (Python/Go, with Java integrations), optimize CI/CD (Jenkins), operate Kubernetes/workflow orchestration, integrate enterprise systems, and drive secure, resilient engineering and responsible AI-assisted development practices.

Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid environments. Investigate vulnerabilities, misconfigurations, identity risks, and exposure paths using CSPM/CNAPP platforms; prioritize findings and drive remediation. Build Python- and API-based security tooling, dashboards, integrations, automation, and guardrails supported by infrastructure as code and CI/CD. Secure Kubernetes workloads, conduct architecture and pipeline reviews, investigate incidents, and collaborate with Cloud Operations, SRE, and engineering teams.

Design, implement, and maintain cloud security controls across Azure, hybrid, and on-prem environments. Manage IAM, RBAC, PIM, and CI/CD security; monitor posture with Sentinel and Defender; run vulnerability and risk assessments; support incident response and remediation; enforce policies aligned to NIST, SOC 2, and CIS; drive data protection.

Lead design, implementation, automation, and operation of enterprise Okta identity services. Drive application onboarding, federation, lifecycle management, resiliency, monitoring, incident response, governance, and platform automation while mentoring engineers and improving security posture.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Lead cloud security initiatives across AWS, Azure, and GCP by partnering with SRE, architecture, and app teams. Implement secure-by-design controls, monitor and improve cloud posture, support compliance, threat detection, incident response and forensics, mentor junior engineers, and integrate new security technologies into networking cloud environments.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Lead the maturation of Ontic’s AWS cloud security program by designing and automating security controls, integrating security into CI/CD workflows, improving cloud monitoring and detection, and developing continuous evidence collection for FedRAMP and other compliance initiatives. Partner with Engineering and DevOps teams on secure architecture, cloud best practices, regulated SaaS environments, and measurable security improvements.

Protect and harden Wolters Kluwer's centralized GenAI platform (FAB) by implementing cloud-native security controls, IAM and least-privilege practices, DevSecOps automation, vulnerability management, security monitoring, and compliance support (SOC 2, HIPAA). Collaborate with engineering and audit teams to integrate security into CI/CD pipelines, triage findings, and support incident response and audit readiness.

Design and enforce cloud security best practices, build automated monitoring and remediation tools, integrate AppSec into CI/CD, collaborate with incident response and development teams, research security technologies and prototypes, and manage vulnerability and compliance processes across cloud environments.

Protect and harden Motorola Solutions' multi-cloud (AWS/Azure/GCP) SaaS platform by deploying automated security capabilities (CNAPP, WAF, vulnerability detection), building security automation and CI/CD integrations, supporting compliance (NIST, FedRAMP, ISO, SOC2), and collaborating on detection, incident response, and continuous security improvements.

Lead cloud security engineering to implement and scale cloud-native security controls across AWS/Azure/GCP. Drive CSPM/CNAPP posture management (Wiz, native policies), policy-as-code, IaC automation, container/Kubernetes and API security, and AI-driven security capabilities. Partner with engineering, DevSecOps, IAM, governance, and audit teams to translate controls into repeatable patterns, improve remediation workflows, and support regulatory and risk objectives.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Design, implement, and maintain cloud security controls across Microsoft Azure and Microsoft 365. Configure and operate Defender suite, Sentinel, and logging; assess AKS and container workloads; perform vulnerability management and incident response; collaborate with cloud and compliance teams; support audits and customer security requests; develop documentation, automation, and monitoring to improve security posture.

Design, implement, and maintain secure on-premises and cloud/hybrid systems; enforce NIST SP 800-53 controls for ATOs; perform hardening, vulnerability remediation, incident response, log monitoring, IAM enforcement, and compliance documentation.

Design and implement secure AWS architectures, manage IAM and AWS security services (GuardDuty, Security Hub, Inspector, Macie, WAF), build IaC security controls (Terraform, CDK Python), perform threat modeling and vulnerability remediation, implement logging/monitoring (CloudTrail, CloudWatch, SIEM), support incident response, automate compliance checks, and collaborate with DevOps to embed security in CI/CD pipelines.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead design and implementation of cloud security controls across AWS/GCP, Kubernetes, and serverless environments. Harden infrastructure, automate IAM and secrets management, integrate security scanning into CI/CD, operationalize vulnerability management and threat modeling, and partner with engineering to embed DevSecOps practices across AI-driven workflows.

Design, implement, and maintain AWS security controls and secure architectures. Build automated IaC compliance checks, integrate security into CI/CD, manage logging/monitoring, perform threat modeling and vulnerability assessments, support incident detection/response, and align cloud environments with security frameworks and regulatory requirements.

Support DoD cloud security by implementing NIST/FedRAMP/DoD controls, configuring IAM/RBAC/Zero Trust, conducting vulnerability assessments and incident response, and producing SSPs, SARs, and POA&Ms to ensure compliance.